Health Insurance Portability Accountability Act (HIPAA)

HIPAA

Fairfax County understands your health privacy is important
and we are committed to implementing the provisions of the Health
Insurance Portability and Accountability Act (HIPAA, 43 USC
201, et seq. and 45 CFR Parts 160 and 164). If the covered health
care components of Fairfax County have not maintained your health
information in a confidential manner consistent with the requirements
of HIPAA, we want you to notify us. You may use the feedback
form to submit your complaint. We will review your feedback
in order to consider remediation and to better protect your
rights to patient confidentiality.

Federal Regulations require that every covered
entity must have an internal process for receiving and evaluating
complaints of HIPAA violations. Typically, such complaints will
be the responsibility of the privacy
office/officer designated by the organization. Fairfax County's
HIPAA Compliance Manager will review all complaints submitted
in writing or by the electronic feedback form.

Fairfax County's HIPAA feedback form is an always-open "hotline"
that facilitates the reporting of possible violations. In accordance
with HIPAA and County policy, Fairfax County may not intimidate,
threaten, coerce, discriminate against, or take other retaliatory
action against an individual who has filed a complaint or participated
in the investigation of a complaint.

In addition, a covered entity may not require individuals to
waive their rights to file a complaint as a condition of the
provision of treatment, payment, enrollment in a health plan
or eligibility for benefits.

Individuals who believe that a covered entity is not complying
with HIPAA requirements also may file a complaint with the Secretary
of the federal Department of Health and Human Services (DHHS).
Currently the Office of Civil Rights (OCR) within DHHS has been
designated to receive such complaints. Complaints involving
covered entities in Virginia may be submitted to: